extract status information from the returned verification session object

Currently evcli does not bubble up the status information from the returned verification session object.  The 200 OK returned from the API should not be taken as an indication that everything went well, but as the signal that the session resource can be successfully retrieved.  If the status of the session object is "failed", it should be reported to the user.